github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow uses the gh CLI to fetch GitHub PR/run details (e.g., gh run view, gh pr checks, gh issue list), which can include outsider-authored free text like PR titles/descriptions/comments and workflow log text that the agent may ingest into LLM context via command output.